Two steps for sensitive roles

Administrator and consultant accounts need a one-time code as well as a password. There is no way to skip it.

Codes expire quickly

Each code is single-use and short-lived, and is never stored anywhere in readable form.

Every attempt is recorded

Sign-ins, failures and resends are written to the audit trail with the request that caused them.